42a4edec5b78e95fcb5d12575b9be611_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42a4edec5b78e95fcb5d12575b9be611_JaffaCakes118
Size

326KB
MD5

42a4edec5b78e95fcb5d12575b9be611
SHA1

5b6d6649d819ce29ce00efab5943ffeb0ab017e4
SHA256

3a5e08d2b6d075846c2c9d75b7270d44851d1af2a1a5fad903cb40128dad77d2
SHA512

10ab8bf983a318094901aeba2f723bc03720b8d30545a9cdd0c787c8c3e69d90c7c7105e5566d17a73491727af5c71da55fd2f1603f8be3e68ec796bc937b835
SSDEEP

6144:wN5Fn26nuRMTO/vWU1d2GDNk6xn2nAWCTT1lHepfW07Ly+k6Ppvk3+uCa4H5PLct:wNHn26INWEdlJk6xnEAWIT3+dyWwWa4Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42a4edec5b78e95fcb5d12575b9be611_JaffaCakes118

Files

42a4edec5b78e95fcb5d12575b9be611_JaffaCakes118
.exe windows:4 windows x86 arch:x86

323407f6811114e60163e30c623c2fa8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

wsprintfA

Sections

.data
Size: 280KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Love@YT
Size: 6KB - Virtual size: 286KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE